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Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS. 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time niay be available under the provisbns of 37 CFR 1 .136(a). In no event, however, nnay a reply be tiniely filed 
after SIX (6) MONTHS from the nnailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period vjiW apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- FaUure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after t he mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37. CFR 1.704(b). 

Status 

1)13 Responsive to communication(s) filed on 17 November 2003 . 
2a)\3 This action is FINAL. 2b)l3 This action is non-final. 

3) 0 Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1 935 CD. 1 1 , 453 O.G. 21 3. 

Disposition of Claims 

4) 13 Claim(s) 1 and 2 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

6) S Claim(s) 1 and 2 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 13 The specification is objected to by the Examiner. 

10)^ The drawing(s) filed on 19 March 2004 is/are: a)n accepted or b)S objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held In abeyance. See 37 CFR 1.85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
!!)□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)n Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)n All b)n Some * c)^ None of: 

Certified copies of the priority documents have been received., 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attachment(s) 

1 ) S Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-41 3) 

2) □ Notice of Draflsperson's Patent Drawing Review (PTO-948) PaP®'' No(s)/Mail Date. . 

3) □ Information Disclosure Statement(s) (PTO/SB/08) 5) □ Notice of Informal Patent Application 

Paper No{s)/Mail Date . 6) □ Other: . 

U.S. Patent and Trademark Offce 

PTOL-326 (Rev. 08-06) Office Action Summary Part of Paper No./Mail Date 20061 1 1 6 
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DETAILED ACTION 

1 . Claims 1-2 liave been examined. 

Priority 

2. . Examiner is aware of the application claims priority of U.S. Provisional 
Application No. 60/427,401, filed on November 19, 2002. 

However, the claimed priority statement is not in the specification or application 
data sheet. Please revise. 

Information Disclosure Statement 

3. The listing of references in the specification is not a proper information disclosure 
statement. 37 CFR 1 .98(b) requires a list of all patents, publications, or other 
information submitted for consideration by the Office, and MPEP § 609.04(a) states, 
"the list may not be incorporated into the specification but must be submitted in a 
separate paper." Therefore, unless the references have been cited by the examiner on 
form PTO-892, they have not been considered. 

Drawings 

4. The drawings are objected to under 37 CFR 1 .83(a). The drawings must show 
every feature of the invention specified in the claims. Therefore, the Application profile 
database and reporter in claim 2 must be shown or the feature(s) canceled from the 
claim (s). No new matter should be entered. 

Corrected drawing sheets in compliance with 37 CFR 1.121(d) are required in 
reply to the Office action to avoid abandonment of the application. Any amended 
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replacement drawing sheet should include all of the figures appearing on the immediate 
prior version of the sheet, even if only one figure is being amended. The figure or figure 
number of an amended drawing should not be labeled as "amended." If a drawing figure 
is to be canceled, the appropriate figure must be removed from the replacement sheet, 
and where necessary, the remaining figures must be renumbered and appropriate 
changes made to the brief description of the several views of the drawings for 
consistency. Additional replacement sheets may be necessary to show the renumbering 
of the remaining figures. Each drawing sheet submitted after the filing date of an 
application must be labeled In the top margin as either "Replacement Sheet" or "New 
Sheet" pursuant to 37 CFR 1.121(d). If the changes are not accepted by the examiner, 
the applicant will be notified and informed of any required corrective action in the next 
Office action. The objection to the drawings will not be held in abeyance. 

Specification 

5. The following guidelines Illustrate the preferred layout for the specification of a 
utility application. These guidelines are suggested for the applicant's use. 

Arrangement of the Specification 

As provided in 37 CFR 1 .77(b), the specification of a utility application should 
include the following sections in order. Each of the lettered items should appear in 
upper case, without underlining or bold type, as a section heading. If no text follows the 
section heading, the phrase "Not Applicable" should follow the section heading: 

(a) TITLE OF THE INVENTION. 

(b) CROSS-REFERENCE TO RELATED APPLICATIONS. 

(c) STATEMENT REGARDING FEDERALLY SPONSORED RESEARCH OR 

DEVELOPMENT. 

(d) THE NAMES OF THE PARTIES TO A JOINT RESEARCH AGREEMENT. 
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(e) INCORPORATION-BY-REFERENCE OF MATERIAL SUBMITTED ON A 

COMPACT DISC. 

(f) BACKGROUND OF THE INVENTION 

(1 ) Field of the Invention. 

(2) Description of Related Art including information disclosed under 37 
CFR 1,97 and 1.98. 

(g) BRIEF SUMMARY OF THE INVENTION. 

(h) BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWING(S). 

(i) DETAILED DESCRIPTION OF THE INVENTION. 

(j) CLAIM OR CLAIMS (commencing on a separate sheet). 

(k) ABSTRACT OF THE DISCLOSURE (commencing on a separate sheet). 

(I) SEQUENCE LISTING (See MPEP § 2424 and 37 CFR 1.821-1.825. A 
"Sequence Listing" is required on paper if the application discloses a 
nucleotide or amino acid sequence as defined in 37 CFR 1 .821 (a) and if 
the required "Sequence Listing" is not submitted as an electronic 
document on compact disc). 

Content of Specification 

(a) Title of the Invention : See 37 CFR 1 .72(a) and MPEP § 606. The title of 
the invention should be placed at the top of the first page of the. 
specification unless the title is provided in an application data sheet. The 
title of the invention should be brief but technically accurate and 
descriptive, preferably from two to seven words may not contain more 
than 500 characters. 

(b) Cross-References to Related Applications : See 37 CFR 1 .78 and MPEP 
§201.11. 

(c) Statement Regarding Federally Sponsored Research and Development : 
See MPEP §310. 

(d) The Names Of The Parties To A Joint Research Agreement : See 37 CFR 
1.71(g). 

(e) Incorporation-Bv-Reference Of Material Submitted On a Compact Disc: 
The specification is required to include an incorporation-by-reference of 
electronic documents that are to become part of the permanent United 
States Patent and Trademark Office records in the file of a patent 
application. See 37 CFR 1.52(e) and MPEP § 608.05. Computer 
program listings (37 CFR 1.96(c)), "Sequence Listings" (37 CFR 1.821(c)), 
and tables having more than 50 pages of text were permitted as electronic 
documents on compact discs beginning on September 8, 2000. 
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(f) Background of the Invention : See MPEP § 608.01 (c). Tine specification 
should set forth the Background of the Invention in two parts: 

(1 ) Field of the Invention : A statement of the field of art to which the 
invention pertains. This statement may include a paraphrasing of 
the applicable U.S. patent classification definitions of the subject 
matter of the claimed invention. This item may also be titled 
•Technical Field." 

(2) Description of the Related Art including information disclosed under 
37 CFR 1 .97 and 37 CFR 1.98 : A desaiption of the related art 
known to the applicant and including, if applicable, references to 
specific related art and problems involved in the prior art which are 
solved by the applicant's invention. This item may also be titled 
"Background Art." 

(g) Brief Summarv of the Invention : See MPEP § 608.01(d). A brief summary 
or general statement of the invention as set forth in 37 CFR 1 73. The 
summary is separate and distinct from the abstract and is directed toward 
the invention rather than the disclosure as a whole. The summary may 
point out the advantages of the invention or how it solves problems 
previously existent in the prior art (and preferably indicated in the 
Background of the Invention). In chemical cases it should point out in 
general terms the utility of the invention. If possible, the nature and gist of 
the invention or the inventive concept should be set forth. Objects of the 
invention should be treated briefly and only to the extent that they 
contribute to an understanding of the invention. 

(h) Brief Description of the Several Views of the Drawing(s) : See MPEP § 
608.01 (f). A reference to and brief description of the drawing(s) as set 
forth in 37 CFR 1.74. 

(i) Detailed Description of the Invention : See MPEP § 608.01(g). A 
description of the preferred embodiment(s) of the invention as required in 
37 CFR 1 .71 . The description should be as short and specific as is 
necessary to describe the invention adequately and accurately. Where 
elements or groups of elements, compounds, and processes, which are 
conventional and generally widely known in the field of the invention 
described and their exact nature or type is not necessary for an 
understanding and use of the invention by a person skilled in the art, they 
should not be described in detail. However, where particularly 
complicated subject matter is involved or where the elements, 
compounds, or processes may not be commonly or widely known in the 
field, the specification should refer to another patent or readily available 
publication which adequately describes the subject matter. 
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(j) Claim or Claims : See 37 CFR 1 .75 and MPEP § 608.01 (m). The claim or 
claims must commence on separate sheet or electronic page (37 CFR 
1 .52(b)(3)). Where a claim sets forth a plurality of elements or steps, each 
element or step of the claim should be separated by a line indentation. 
There may be plural indentations to further segregate subcombinations or 
related steps. See 37 CFR 1 .75 and MPEP § 608.01 (i)-(p). 

(k) Abstract of the Disclosure : See MPEP § 608.01 (f). A brief narrative of the 
disclosure as a whole in a single paragraph of 1 50 words or less 
commencing on a separate sheet following the claims. In an international 
application which has entered the national stage (37 CFR 1 .491 (b)), the 
applicant need not submit an abstract commencing on a separate sheet if 
an abstract was published with the international application under PCT 
Article 21 . The abstract that appears on the cover page of the pamphlet 
published by the International Bureau (IB) of the World Intellectual 
Property Organization (WlPO) is the abstract that will be used by the 
USPTO. See MPEP § 1893.03(e). 

(I) Sequence Listing. See 37 CFR 1.821-1.825 and MPEP §§ 2421-2431. 
The requirement for a sequence listing applies to all sequences disclosed 
in a given application, whether the sequences are claimed or not. See 
MPEP §2421.02. 

Claim Objections 

6. Claims 1-2 are objected to because of the following informalities: 

a. In claim 1 , "the method comprising the steps of should be "the method 
comprising steps of; 

b. In claim 2, "comprising the following elements" should be "comprising 
following elements"; 

Appropriate confection is required. 



7. 



Claim Rejections - 35 USC §112 
The following is a quotation of the second paragraph of 35 U.S.C. 112: 
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The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

8. Claim 2 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. 

Claim 2 recites "...the Application Profiling methodology" under item a, lacks of 
an antecedent basis. Additionally, "the cataloguing and analysis..." under item b lacks 
of an antecedent basis. Further, "the characteristic elements of application users 
requests" under item a, lacks of an antecedent basis. 

Claim Rejections - 35 USC § 101 

9. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

10. Claims 1-2 are rejected under 35 U.S.C, 101 because the claimed invention is 
directed to non-statutory subject matter. 

Claim 1 is directed to a method for information system application intrusion 
detection. The examiner respectfully asserts that the claimed subject matter does not 
fall within the statutory classes listed in 35 USC 101 . The claimed steps do not result in 
a tangible result. Claim 1 is rejected as being directed to an abstract idea (i.e., 
producing non-tangible result) [tangible requirement does require that the claim must 
recite more than a 101 judicial exception, in that the process must set forth a practical 
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application of that 101 judicial exception to produce a real-world result, Benson, 409 
U.S. at 71-72, 175 USPQ at 676-77). 

Claim 2 is directed a system for information system application intrusion 
detection. However, it appears that the system would reasonably be interpreted by one 
of ordinary skill in the art as software, per se. There is no element positively recited as 
part of the apparatus. Applicant's specification provides no explicit and deliberate 
definition on any element positively recited as part of the system, and it appears that 
such would reasonably be interpreted as representative of the software which performs 
information system application intrusion. As such, it believed that the system of claim 2 
Is reasonably interpreted as functional descriptive material, per se. 

Claim Rejections '35 use §102 

1 1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, moire than one year prior to the date of application for patent in the United 

States. 

12. Claims 1-2 are rejected under 35 U.S.C. 102(b) as being anticipated by Conklin 
et al. (U.S. Patent No. 5,991 ,881 ). 

As per claim 1, Conklin et al. discloses a method for intrusion detection, 
comprising: 
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a. non-intrusive ("tliis system is transparent to tlie intruder"- e.g. col. 1 , line 66) 
monitoring (fig. 6A, col. 4, lines 11-13 and col. 4, lines 30-43) of user requests ("type of 
communication, i.e. E-mail, ftp, www, telnet, etc." - e.g. col. 3, lines 10-11). 

b. cataloguing of user requests to an application into an application profile 
database (fig. 6D, col. 4, lines 30-32, col. 4, lines 52-53 and col. 4, lines 61-63). 

c. analysis including comparison of user requests to the application profile 
database to identify potential security threats (fig. 6E, col. 4, lines 32-43) 

d. format for reporting identified security threats (fig. 6C and fig. 6E). 

As per claim 2, Conklin et al. discloses a system for intrusion detection, 
comprising: 

a. a sensor focused on extracting characteristic elements of application users 
requests (col. 4, lines 11-13 and col. 4, lines 30-32). 

b. an Application Profile database that performs the cataloguing and analysis of 
user requests (e.g. col. 4. lines 52-53 and col. 4, lines 61-63) 

c. a reporter that communicates identified security threats (fig. 6C and fig. 6E). 

Conclusion 

1 3. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure, (see PTO - 892). 
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Contact Information 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to April Y. Shan whose telephone number is (571 ) 270- 
1014. The examiner can normally be reached on Monday - Friday, 8:00 a.m. - 5:00 
p.m., EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Y. Vu can be reached on (571) 272-3859. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-91 99 (IN USA OR CANADA) or 571-272-1 000. 
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